PT-2026-36204

🗓️ 30 Apr 2026 00:00:00Reported by Positive TechnologiesType

Authenticated user may cause DoS in IBM Db2 on Linux, Unix, Windows due to improper neutralization in data query logic under certain configurations.

Reporter	Title	Published	Views	Family All 15
IBM Security Bulletins	Security Bulletin: There are multiple vulnerabilities in IBM DB2 bundled with IBM Application Performance Management products.	21 May 202614:00	–	ibm
IBM Security Bulletins	Security Bulletin: IBM® Db2® is vulnerable to a denial of service when fetching from certain tables under specific configurations (CVE-2025-14688)	15 Apr 202619:26	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities have been identified in IBM Db2 shipped with IBM Guardium Key Lifecycle Manager (SKLM/GKLM)	6 May 202613:53	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities have been identified in IBM DB2 shipped with IBM WebSphere Remote Server	5 May 202616:22	–	ibm
ATTACKERKB	CVE-2025-14688	30 Apr 202621:48	–	attackerkb
Circl	CVE-2025-14688	30 Apr 202622:50	–	circl
CNNVD	IBM Db2 安全漏洞	30 Apr 202600:00	–	cnnvd
CVE	CVE-2025-14688	30 Apr 202621:48	–	cve
Cvelist	CVE-2025-14688 IBM® Db2® is vulnerable to a denial of service when fetching from certain tables under specific configurations	30 Apr 202621:48	–	cvelist
Tenable Nessus	IBM DB2 Multiple DoS (7269433, 7269434, 7269424, 7267642) (Unix)	24 Apr 202600:00	–	nessus

Source	Link
twitter	www.twitter.com/VulmonFeeds/status/2050015745958887903
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-14688
twitter	www.twitter.com/CVEnew/status/2049984037520072731
twitter	www.twitter.com/infoflowcloud/status/2049984869061562711
ibm	www.ibm.com/support/pages/node/7269424

01 May 2026 00:00Current

5.8Medium risk

Vulners AI Score5.8

CVSS 3.15.3

EPSS0.00061